Are No-KYC Crypto Exchanges Legal in 2027? EU, US, Russia and Taxes

The short answer

In most countries, nothing stops an individual from exchanging their own crypto at a service that doesn't ask for ID. KYC and anti-money laundering (AML) laws are aimed at intermediaries: exchanges, swap services and payment services. They are the ones required to verify customers, keep records and report suspicious transactions. We found no penalties for an individual simply for swapping crypto without identity verification in the EU, the US or Russia.

But "legal" doesn't mean "no rules". The money has to be yours and clean, taxes are due whether or not anyone asked for your passport, and in some countries the rules for individuals are changing right now. Below is a country-by-country, date-by-date breakdown, with no advice on how to get around anything.

Who is legally required to verify your identity

The global baseline is set by the FATF, the international body that writes anti-money laundering standards. Since June 2019, its Recommendation 15 has applied to virtual asset businesses (VASPs, in FATF terms). They must know their customers and pass on sender and recipient details when transferring funds between each other: this is the so-called Travel Rule, with a threshold of no more than $1,000 or €1,000.

According to the FATF's July 2026 update, 83% of the jurisdictions reviewed have passed Travel Rule legislation, up from 73% a year earlier. Among its next priorities, the FATF names unhosted wallets and decentralized finance. But even here the requirements are addressed to platforms and supervisors, not to wallet owners.

That leads to the core principle. If a service operates in a country where it is required to verify customers and doesn't, it is the service that breaks the law. A user exchanging their own money is not the subject of those requirements. That is why exchanging crypto without registration does not, by itself, make the person exchanging a lawbreaker.

What changed in Europe and what's coming in 2027

MiCA. On 1 July 2026, the MiCA transitional period ended: crypto services in the EU can now operate only with a CASP license. Some countries closed the window earlier: the Netherlands and Finland on 30 June 2025, Sweden on 30 September 2025. In Spain, the Bank of Spain register is closed and authorization is granted by the CNMV; in France, the former PSAN status has been replaced by the CASP license.

Travel Rule without a threshold. Regulation (EU) 2023/1113 requires licensed platforms to pass on transfer data between each other with no minimum amount. If more than €1,000 arrives at a platform from your own self-hosted wallet, the platform must make sure the address belongs to you. The regulation doesn't say exactly how to check this.

AMLR from 10 July 2027. Article 79 of the new Regulation (EU) 2024/1624 bars licensed platforms from keeping anonymous accounts and from handling anonymity-enhancing coins such as Monero and Zcash. The ban applies to exchanges and swap services licensed in the EU: it does not stop you from holding these coins in your own wallet. We have covered why Monero is being delisted in a separate article. As long as you have your own wallet, you can exchange bitcoin to Monero without registration and receive XMR straight to your address.

United States: what's legal for users

FinCEN's position. FinCEN's guidance of 9 May 2019 (FIN-2019-G001) states plainly that a user of an unhosted wallet is not a "money transmitter", and neither is the developer of software for such a wallet, as long as they don't control other people's funds. A service that accepts other people's coins and sends them on, however, is a money transmitter and must register.

Mixers: where the law pushed harder and where it backed off. In November 2025, Samourai Wallet founders Keonne Rodriguez and William Hill were sentenced to five and four years after pleading guilty to conspiracy to operate an unlicensed money transmitting business. In August 2025, a jury found Tornado Cash developer Roman Storm guilty on the same count and could not reach a verdict on money laundering and sanctions charges. A retrial on those two charges is set for 26 April 2027.

At the same time, the overall course has softened. In April 2025, Deputy Attorney General Todd Blanche's memo "Ending Regulation By Prosecution" directed prosecutors not to go after exchanges, mixers and wallets for their users' actions without proven intent. On 5 October 2026, FinCEN withdrew two proposed rules: the 2020 one on unhosted wallets and the 2023 one on mixing. Existing Bank Secrecy Act obligations for platforms remain unchanged.

In all of these cases, the defendants were the people running the service. Ordinary users were not prosecuted in these cases for using a wallet or a mixer.

Russia: the new digital currency law

Federal Law No. 282-FZ "On Digital Currencies and Digital Rights" was signed on 4 August 2026. Most of its provisions apply from 1 September 2026, and from 1 July 2027, according to an analysis by the law firm Pepeliaev Group, residents may carry out crypto transactions only with regulated market participants: trading organizers, brokers, trust managers, digital depositories and crypto exchange organizations, some of which must be listed in special Bank of Russia registers. There are three exceptions: payments with non-residents under foreign trade deals, transactions made without Russian national payment system entities and without any funds located in Russia, and miners' transactions with mined coins when the counterparty is a non-resident. Non-qualified investors face a risk knowledge test and an annual limit.

The previous Federal Law No. 259-FZ on digital financial assets is being phased out and will lapse completely by 1 September 2028. Liability is still at the bill stage: amendments to the Code of Administrative Offenses and Article 171.7 of the Criminal Code target those who organize crypto circulation without a license, not private individuals. As of October 2026, we found no separate liability for an individual swapping crypto without identity verification. We have covered how the first major bank got onto the central bank's register in our article on how Sberbank joined the Bank of Russia's crypto exchange registry.

If you are a Russian resident, it's worth rereading the law and the Bank of Russia's guidance after 1 July 2027: the rules for individuals will be refined by secondary regulations.

Taxes don't depend on KYC

Exchanging without ID doesn't exempt you from taxes. In the US, digital assets are property, and swapping one coin for another is a taxable event: it has to be reported on your return (the digital asset question on Form 1040 and Form 8949). Moving funds between your own wallets is not treated as a transaction.

In the EU, the DAC8 directive has applied since 1 January 2026: licensed platforms collect data on their customers' transactions, the first reports go to tax authorities in 2027, and the first exchange of that data between countries is due by 30 September 2027. Local rules are getting stricter too: France is discussing a mandatory declaration of self-custody wallets above €100,000, while in Spain, by contrast, the tax agency has confirmed that coins in a self-custody wallet are not reported on Modelo 721.

Put simply, the fact that an exchange doesn't have your data doesn't change the fact that you have to declare your income under your own country's rules.

Where the legal line is

Legal almost everywhere:

• exchanging your own crypto into your own wallet;
• keeping coins in a non-custodial wallet instead of on an exchange;
• not wanting a copy of your passport sitting in someone else's database that could be hacked;
• using privacy coins where they are not banned for individuals.

Illegal everywhere:

• laundering the proceeds of crime;
• evading sanctions;
• splitting amounts to avoid mandatory reporting. In the US this is a separate crime (31 USC 5324), punishable by up to 5 years, or up to 10 in aggravated cases, even if the money was earned honestly;
• not paying tax on your income.

A no-KYC service is a tool, like cash. What makes it legal or not is not the tool, but where the money came from and what you do with it.

No-registration crypto exchange: how it works at VertEXchange

VertEXchange doesn't create accounts and doesn't ask for an email, phone number or documents. All you need to exchange is the wallet address where the coins will arrive: there is nothing to leak because there is simply no customer database. We don't promise that checks never happen: every pair has a mark next to the rate showing how likely an extra check is on a large amount, and you see it before you send, not after. If a swap does get stopped, we explain what to do in our article on why a swap gets stopped for an AML check.

• The rate and the amount you will receive are shown before you send, and a fixed rate holds for about 15 minutes.
• Coins go straight to your address; the service doesn't hold them.
• If the exchange doesn't go through, the coins are returned to your refund address.
• Personal fields of an order are deleted 24 hours after it completes, and your exchange history is stored only in your browser.
• Support chat is available on every page, by exchange code.

For example, you can buy bitcoin with USDT TRC-20 without registration and receive it straight to your wallet.

FAQ

Are no-KYC crypto exchanges legal in 2027?

In most countries, yes: the duty to verify customers lies with services, not users. But in the EU, from 10 July 2027, licensed platforms are barred from anonymous accounts and anonymity-enhancing coins, and in Russia, from 1 July 2027, residents must transact through regulated Russian intermediaries, with a few narrow exceptions. Taxes have to be paid either way.

Can you get in trouble for using a no-KYC exchange?

We found no penalties for an individual simply for exchanging crypto without identity verification in the EU, the US or Russia. People are punished for money laundering, sanctions evasion, splitting amounts to avoid reporting and tax evasion, and that doesn't depend on whether there was KYC.

Are Monero and Zcash banned in Europe from 2027?

No, not for individuals. From 10 July 2027, the AMLR bars EU-licensed platforms from handling anonymity-enhancing coins. The law does not stop you from holding them in your own wallet or receiving them there.

Do you have to pay taxes if the exchange didn't ask for ID?

Yes. Your tax obligations depend on your country's rules and your income, not on whether the service verified you. In the US, swapping one coin for another is a taxable event, and in the EU, licensed platforms have been collecting data for tax authorities under DAC8 since 2026.

Why does a no-KYC exchange sometimes ask for a check?

If a swap is linked to stolen funds or sanctioned addresses, or looks unusual, it can be stopped for an AML check. In our exchange form, the likelihood of such a check on a large amount is shown next to the rate before you send.